Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kSXKBQy7EO4Z2MlVTW9fa-lqreE.roa
File: kSXKBQy7EO4Z2MlVTW9fa-lqreE.roa (raw, json)
Hash identifier: LB0fkGnI7LyKFK1BE1n/LdwMTYUghrWJJzY9jvtLE1c=
Subject key identifier: 91:25:CA:05:0C:BB:10:EE:19:D8:C9:55:4D:6F:5F:6B:E9:6A:AD:E1
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A08C25471A156E998F14784033EB95AB0B
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kSXKBQy7EO4Z2MlVTW9fa-lqreE.roa
Signing time: Thu 10 Sep 2026 16:27:28 +0000
ROA not before: Thu 10 Sep 2026 16:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219268
IP address blocks: 94.183.195.0/24 maxlen: 24
94.183.196.0/24 maxlen: 24
94.183.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:25:47:1a:15:6e:99:8f:14:78:40:33:eb:95:ab:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Sep 10 16:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9125ca050cbb10ee19d8c9554d6f5f6be96aade1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:35:33:e3:f4:6a:fe:8f:df:b3:8e:f4:8c:
85:4b:db:0a:fd:7f:60:1a:f9:e9:11:0f:79:3b:70:
79:ff:8b:8c:4e:0b:15:6c:b6:40:a6:0c:88:24:3d:
f4:5e:d2:f5:68:01:10:cd:b9:8b:31:ee:f3:7e:c7:
30:53:2e:1e:fb:ab:94:93:2e:03:2d:f2:ca:6d:36:
e0:aa:df:a3:9d:53:db:a5:a0:5b:74:ff:a4:e5:f8:
71:b5:f9:a6:fe:b7:7c:c6:91:d1:b9:d6:a7:1d:2c:
82:d5:4f:12:f5:3f:74:61:a2:b7:a6:dd:af:fa:45:
f2:cc:08:65:fa:45:40:3e:a2:8c:c3:f3:32:f9:00:
20:a6:17:ef:93:1d:00:17:ad:23:c8:c8:15:17:82:
a2:b5:aa:40:62:47:15:07:f3:5e:c4:4f:35:14:1d:
ef:82:07:73:08:dd:19:6b:1b:22:66:3f:d0:35:49:
12:a6:0e:d7:a6:f8:76:3a:44:9c:9d:06:65:23:06:
24:be:56:98:fc:ed:be:34:09:ab:90:d0:cd:71:8c:
3a:d1:61:e5:98:a0:ae:ab:33:b0:1c:16:90:7c:ba:
c3:d3:e0:64:cd:19:f0:ab:82:53:8c:04:a1:a7:65:
d1:0e:6c:13:64:f0:31:e4:83:88:8e:de:05:c6:99:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:25:CA:05:0C:BB:10:EE:19:D8:C9:55:4D:6F:5F:6B:E9:6A:AD:E1
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/kSXKBQy7EO4Z2MlVTW9fa-lqreE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.195.0-94.183.197.255
Signature Algorithm: sha256WithRSAEncryption
6a:45:54:81:a8:47:20:b6:0b:45:d3:96:09:cf:75:5a:c0:67:
dc:58:bc:e9:73:8b:aa:50:10:5b:c8:b0:64:58:c2:59:55:cd:
cd:1e:a6:86:2a:58:43:9f:0b:ae:9e:6e:07:87:e9:13:2f:c8:
cb:3b:d7:86:40:c5:cc:d7:b3:c0:7a:3e:d2:c3:8c:83:46:b8:
69:d6:0d:3d:bb:30:5d:68:c9:a3:bb:83:e8:17:d7:41:ab:16:
c8:e5:e3:37:f6:23:f6:86:43:74:6f:93:c0:e4:77:e6:2e:2c:
7f:ca:ee:95:3a:7f:be:53:d1:46:63:b1:85:ab:20:31:ef:81:
f3:bc:27:6a:34:0d:d9:1c:d4:88:e8:36:a1:c6:24:04:e1:d4:
fb:2d:f1:9a:bc:ba:7c:7e:0d:fd:54:75:7b:41:04:2a:c0:dc:
fd:1e:6e:cc:ab:11:d8:f0:80:88:6d:31:e9:fd:c6:12:e1:0a:
f6:2b:8a:6c:15:cb:8f:85:48:5a:b3:7c:b7:16:43:e9:e6:0e:
67:f4:7f:98:87:c8:b1:00:52:af:67:51:90:de:23:62:3d:81:
21:8b:62:91:b7:d1:92:28:d8:79:39:5d:c3:ca:b6:c6:bf:84:
00:5f:c6:0c:da:f2:e6:fe:20:c2:1d:44:8e:8e:02:68:6b:06:
4c:9a:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:05:00 2026 by rpki-client